CVE-2023-38830

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

CVE-2023-38830

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

Information disclosure

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

CVE-2023-38830

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

CVE-2023-38830

An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module...

Yacht Listing Script Security Vulnerability

Yacht Listing Script is yacht and boat classification software. A security vulnerability exists in Yacht Listing Script v1.0. An attacker exploited the vulnerability to export a customer's credit card number from the booking module...

CVE-2023-38830

The CVE describes an information leak in PHPJabbers Yacht Listing Script v1.0 that allows exporting clients’ credit card numbers from the Reservations module. The affected software is PHPJabbers Yacht Listing Script (version 1.0). The vulnerability is described as an information disclosure flaw (...

Medium: bouncycastle

Issue Overview: A flaw was found in Bouncy Castle 1.73. This issue targets the fix of LDAP wild cards. Before the fix there was no validation for the X.500 name of any certificate, subject, or issuer, so the presence of a wild card may lead to information disclosure. This could allow a malicious...

CVE-2023-36914

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...

CVE-2023-36914

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...

CVE-2023-36914

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...

Security feature bypass

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability...

CVE-2023-36914 Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

...

CVE-2023-36914

Technical details about CVE-2023-36914 are not publicly available in the provided connected documents. The sources reference the vulnerability in general terms and Microsoft update KBs, but do not expose affected products, root cause, or patch specifics. Monitor for updates.

CVE-2023-36914 Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

...

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

...

PT-2023-4385 · Microsoft · Windows Smart Card Resource Management Server +1

Name of the Vulnerable Software and Affected Versions: Windows Smart Card Resource Management Server affected versions not specified Description: The issue is related to a lack of protection for service data, which can be exploited to reveal protected information. It allows attackers to affect th...

Microsoft Windows Windows Smart Card Resource Management Server Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Smart Card Resource Management Server. An attacker could exploit this vulnerability to bypass certain functionality. The following...

Behind the Scenes of a Tailor-Made Massive Phishing Campaign

A global phishing campaign caught our attention after one of our colleagues was targeted by, and nearly fell victim, to a social engineering attack. The campaign involved more than 800 different scam domains and impersonated around 340 legitimate companies all over the world – including well-know...

Simple Blog Card < 1.32 - Subscriber+ Arbitrary Post Access

Description The plugin does not ensure that posts to be displayed via a shortcode are public, allowing any authenticated users, such as subscriber, to retrieve arbitrary post title and their content such as draft, private and password protected ones PoC Run the below command in the developer...